19865 matches found
CVE-2026-17862
CVE-2026-17862 is a use-after-free in Chromium’s Tracing component affecting Google Chrome on Windows, where a local attacker could escalate to OS-level privileges via a malicious file. Upstream references point to Chromium issue 520426287 describing the flaw. Red Hat notes the use-after-free in ...
CVE-2026-17863
CVE-2026-17863 describes an insecure implementation in Google Chrome on Windows, before version 151.0.7922.72, enabling a local attacker to escalate privileges via a malicious file. The issue is attributed to an improper or insecure code path in the browser and is listed with a Chromium security ...
CVE-2026-17862
Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2026-17861
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2026-17861
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
EUVD-2026-50610
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
EUVD-2026-50609
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox URL bar via a malicious file. Chromium security severity: Medium...
CVE-2026-17860
CVE-2026-17860 corresponds to an insufficient validation of untrusted input in the Mobile component of Google Chrome on Android. A local attacker could spoof the Omnibox (URL bar) by leveraging a malicious file, with impact described as: bypassing input validation in Chromium/Chrome Mobile prior ...
CVE-2026-17861
CVE-2026-17861 describes insufficient input validation in the Google Chrome Updater prior to 151.0.7922.72, which allowed a local attacker to escalate to OS-level privileges via a malicious file. The affected component is the Updater within Google Chrome (Chromium-based) and the root cause is unt...
CVE-2026-17860
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox URL bar via a malicious file. Chromium security severity: Medium...
EUVD-2026-50748
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
CVE-2026-17799 describes insufficient validation of untrusted input in Chrome/Chromium Safe Browsing, allowing a remote attacker to bypass discretionary access control via a malicious file. Affects Chrome/Chromium's Safe Browsing component prior to 151.0.7922.72; upstream issue 514461031 referenc...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17699
CVE-2026-17699 is a use-after-free vulnerability in Chrome’s Views component (Chromium) that could allow a local attacker to escape the sandbox via a crafted file. Affected: Google Chrome on supported platforms prior to version 151.0.7922.72. Upstream and vendor advisories (Red Hat, Debian OSV, C...
CVE-2026-17699
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...
EUVD-2026-50825
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...
EUVD-2026-50780
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Critical...